From 7829deb06e1af8c92b1aa3388e98d0d828cf664c Mon Sep 17 00:00:00 2001
From: Marius Burkard <m.burkard@pixcept.de>
Date: Fri, 28 Jul 2017 11:51:06 +0200
Subject: [PATCH] - changed assigned template deletion by remoting api
---
interface/lib/classes/remote.d/client.inc.php | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/interface/lib/classes/remote.d/client.inc.php b/interface/lib/classes/remote.d/client.inc.php
index 5d71938336..5c47c26c76 100644
--- a/interface/lib/classes/remote.d/client.inc.php
+++ b/interface/lib/classes/remote.d/client.inc.php
@@ -339,7 +339,7 @@ class remoting_client extends remoting {
return false;
}
// check if template exists
- $check = $app->db->queryOneRecord('SELECT `assigned_template_id` FROM `client_template_assigned` WHERE `assigned_template_id` = ?', $assigned_template_id);
+ $check = $app->db->queryOneRecord('SELECT `assigned_template_id` FROM `client_template_assigned` WHERE `client_id` = ? AND `client_template_id` = ?', $client_id, $assigned_template_id);
if(!$check) {
throw new SoapFault('Invalid template');
return false;
@@ -349,7 +349,7 @@ class remoting_client extends remoting {
$this->_set_client_formdata($client_id);
$sql = "DELETE FROM `client_template_assigned` WHERE `assigned_template_id` = ? AND `client_id` = ?";
- $app->db->query($sql, $assigned_template_id, $client_id);
+ $app->db->query($sql, $check['assigned_template_id'], $client_id);
$affected_rows = $app->db->affectedRows();
$app->plugin->raiseEvent('client:client:on_after_update', $this);
--
GitLab